Technique

SQL injection or database command execution

technique:sql_injection_or_database_command_execution Also: SQL commands

Execution of SQL commands through a web administration panel to retrieve user information; the episode does not establish that this was SQL injection.

Explore relationships

Mentioned in

Relationships

Direction Predicate Other entity Origin EP
incoming INVOLVES Formspring breach Explicit 86

Claims

Formspring breach INVOLVES SQL injection or database command execution

The hacker used the web administration panel to execute SQL commands and extract user information from the database.

Explicit Confidence 99% · Jack Rhysider EP 86 Details

“he was able to run SQL commands on the database and grabbed a large amount of user info”